LISTING OF CLAIMS 



1 . (currently amended) A method for distributed computation of an RS A inverse 
value (y) for asynchronous authentication for communication of encrypted 
messages in an asynchronous network for at least two input values (x, e) among n- 
1 participating network devices compromising t < n/4 faulty devices and a non- 
faulty leader device, the participating network devices holding share values of the 
Euler function (//(N)) of RSA modulus (N), each participating network device 
performing the steps of: 

a. choosing a first random value (q) and a second random value (r); 

b. sharing over integers (Z) the first random value (#), the second random 
value (r), and the zero value (0); 

c. the leader device performing additionally the steps of: 

i. receiving a first, second, and third sub-share value (q if r h 0,) from 
at least / + 1 participating network devices; 

ii. broadcasting the identities of said participating network devices; 

d. receiving the identities and corresponding sub-share values (q u r if 0,); 

e. deriving a sum-share value (F) from one of the sub-share shar e values, the 
at least one input value (e), and the corresponding first, second and third 
sub-share values (q it r u 0,) defined by the identities; 

f. broadcasting the sum-share values (F); 

g. receiving 2t + 1 sum-share values (F,); 

h. deriving a polynomial if) interpolating the sum-share values (F,) and an 
exponent share value {dp) dependent on the polynomial (/), and an inverse- 
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share value (y P ) dependent on the exponent share value (dp) and the RSA 
modulus (TV); 

i. broadcasting the inverse-share value (y P ); 

j. receiving t + 1 inverse share values valu e (y,); 

k. verifying the validity of the received values for authenticating 

participating network devices by obtaining the RSA inverse value (y) from 
the received inverse-share values valu e determining the validity of the 
obtained RSA inverse value (v) using at least two input values fa, e,), and, 
in the event of a positive determination, broadcasting the RSA inverse 
value (y), and stopping further calculations ; and 

1. applying the derived exponent share values for encryption of 
communications with authenticated participating network devices . 

2. (original) A method according to claim 1 to compute the RSA inverse value (y), 
wherein among n participating network devices (A, B, C, D) compromising t < 
n/4 faulty devise at least t + 1 participating network devices (A, B, C, D) act as a 
leader device while performing n times the steps of claim 1 . 

3. (canceled) 

4. (currently amended) A method according to claim 1, wherein the step £b) (H) of 
sharing over integers (Z) comprises using a threshold signature for determining 
the consistency of subsequently received sub-share values (q iy r u 0,). 
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5. (currently amended) A method according to claim 1 , wherein step (b} (H) of 
sharing over integers (Z) comprises using a vector of digital signatures for 
determining the consistency of subsequently received sub-share values (q i} r it 0/). 

6. (currently amended) A method according to claim 1 , wherein step (h) (VIII) of 
deriving an exponent share value (dp) comprises using the Extended Euclidean 
Algorithm. 

7. (currently amended) A method according to claim 1 9 wherein the step (k) -(Xi) of 
obtaining the RSA inverse value (y) from the received inverse-share value (y,) 
comprises using the Lagrange Interpolation Algorithm. 

8. (currently amended) A plurality of program storage devices, each readable by at 
least one digital processing apparatus and having a program of instructions which 
are tangibly embodied in the storage devices and which are executable by at least 
one processing apparatus to perform a method for distributed computations of an 
RSA inverse value (y\ for asynchronous authentication for communication of 
encrypted messages in an asynchronous network from at least two input values (x, 
e) among n - 1 participating network devices (A, B, C, D) holding share values 
(Ma, Mb, Mo Md) of the Euler function (ju(N)) of an RSA modulus (iV), said 
program allowing each participating network to perform the following steps: 

a. choosing a first random value (q) and a second random value (r); 
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b. sharing over integers (Z) the first random value (q), the second random 
value (r) ? the zero value (0); 

c. the leader device (D) performing additionally the steps of: 

L receiving a first, second, and third sub-share value (q i} r u 0,) from 

at least t + 1 participating network devices; 
ii. broadcasting fee identities (S) of said participating network devices 

d. receiving the identities (S) and corresponding sub-share values (q if r b 0,); 

e. deriving a sum-share value (F) from the sub-share shar e value (p?), the at 
least one input value (<?), and the corresponding sub-share values (q u r u 0,) 
defined by the identities (S), 

f. broadcasting the sum-share value (F); 

g. receiving 2t + 1 sum-share values (F t ); 

h. deriving a polynomial (J) interpolating the sum-share sumOshar e values 
(Ft) and an exponent share value (dp) dependent on the polynomial if) and 
an inverse-share value (yp) dependent on the exponent share value (dp) and 
the RSA modulus (A0[[.]] ; 

i. broadcasting the inverse-share value (yp); 

j. receiving t + 1 inverse-share values valu e (y,); 

k. verifying the validity of the received values for authenticating 

participating network devices by obtaining the RSA inverse value (y) from 
the received inverse-share values valu e (v, \ determining the validity of the 
obtained RSA inverse value (v) using at least two input values (x* e.). and. 
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in the event of a positive determination, broadcasting the RS A inverse 
value (vh and stopping further calculations ; and 
1. applying the derived exponent share values for encryption of 
communications with authenticated participating network devices . 
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